Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: t/SAKDopIjh+fvI4OpoJbeQLTtara/pR41R4vqPJ0FY=
Subject key identifier: D5:A9:2D:EE:64:B1:AA:2B:17:9D:F9:92:19:FC:EC:F5:E6:6E:B1:42
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019E2F976ED3FD1FE1A3F4955B2A6633A718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0BB0
Signing time: Sat 16 May 2026 07:01:53 +0000
Manifest this update: Sat 16 May 2026 07:01:53 +0000
Manifest next update: Sun 17 May 2026 07:01:53 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: K3TK2vcn6oTR/nNqaIY8XDpv1fDajpUNwfRjSwvSkDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:6e:d3:fd:1f:e1:a3:f4:95:5b:2a:66:33:a7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: May 16 07:01:53 2026 GMT
Not After : May 17 07:01:53 2026 GMT
Subject: CN=d5a92dee64b1aa2b179df99219fcecf5e66eb142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:20:15:31:b0:15:d9:4a:e6:60:00:1f:ee:
f6:27:65:bd:f9:84:f4:a9:71:1a:5e:29:4d:9f:ec:
d0:1a:c7:9b:de:29:d6:5d:0f:17:21:e3:87:e2:4f:
56:a9:35:90:64:19:65:57:c8:e8:b5:7a:66:11:53:
0c:5c:c0:2f:f2:d1:7d:d3:5e:42:b1:d4:81:93:e1:
3b:0c:5e:fa:93:07:f4:3a:71:b7:27:9e:23:9f:8a:
9b:46:f7:c6:d9:66:bd:de:61:37:2e:1c:d6:4d:58:
38:95:3d:b7:8a:6b:75:ec:b0:e3:6d:89:2b:ec:4b:
07:8d:c7:09:53:79:80:8c:f7:96:f0:1b:0c:07:8c:
e0:7b:80:87:21:1f:9c:00:82:d6:0a:5d:31:d3:f5:
ec:d8:a3:3d:e1:b5:59:32:f3:6e:2d:d6:eb:18:71:
20:d3:83:45:c2:49:4b:d1:30:8c:75:2d:0d:f4:87:
39:e9:3f:8f:ca:c1:29:83:e1:12:00:91:6d:7b:46:
90:32:ba:03:f3:36:f6:e7:3a:be:8a:51:3b:1f:e8:
c3:ff:44:40:2c:23:36:79:37:9e:04:56:1f:f7:c1:
89:20:49:c1:90:a8:9f:6a:53:8b:e7:93:f4:41:32:
9e:4a:ad:c7:44:12:4b:2c:15:39:4f:3f:74:ec:67:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:2D:EE:64:B1:AA:2B:17:9D:F9:92:19:FC:EC:F5:E6:6E:B1:42
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d0:22:57:27:8a:06:79:8a:8a:05:a0:32:5b:a9:5d:da:75:
1d:dc:66:23:12:59:92:b7:2c:24:f6:be:7e:f8:ff:b5:eb:ac:
4b:5d:36:41:16:05:74:50:5b:f2:ce:a4:65:9c:cc:3c:09:f4:
43:38:fd:b6:ba:79:a6:f2:ed:2a:9f:27:13:ba:51:9b:22:22:
75:f4:08:64:fc:42:39:ef:3f:12:89:49:cd:f6:15:0b:2a:1b:
0d:84:64:82:bd:27:fb:fc:9b:63:72:f1:fd:c0:af:a8:7e:9e:
1c:9d:04:03:1c:cd:d4:e7:f6:d2:1f:1a:86:f8:43:f7:84:b9:
93:a8:89:80:85:0e:ff:18:c3:89:8b:83:51:e2:c9:cb:9f:28:
a0:de:c2:84:4b:75:24:c5:a2:e0:6f:c5:f1:3d:4c:9a:ff:8b:
5d:a4:76:80:41:22:69:55:eb:62:93:8e:69:43:13:0e:ab:f6:
83:74:39:e4:3f:a2:91:1f:32:9b:8c:b7:78:c9:e1:97:70:17:
8b:56:f0:6f:ac:84:ec:b4:22:60:de:49:da:0a:3c:8f:94:dc:
21:d5:a3:0e:cb:0e:62:14:a3:e6:bd:27:74:1c:d8:7c:42:52:
b0:cb:af:8e:3d:eb:ac:18:c3:6e:20:aa:59:a0:76:3b:81:2c:
35:12:ce:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vl27T/R/ho/SVWypmM6cYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNDM4NmU3ZDRlZmM0NzJjMTFmZTljZmVmM2QzMzA5NzRi
MzNmNjEwHhcNMjYwNTE2MDcwMTUzWhcNMjYwNTE3MDcwMTUzWjAzMTEwLwYDVQQD
EyhkNWE5MmRlZTY0YjFhYTJiMTc5ZGY5OTIxOWZjZWNmNWU2NmViMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOggFTGwFdlK5mAAH+72J2W9+YT0
qXEaXilNn+zQGseb3inWXQ8XIeOH4k9WqTWQZBllV8jotXpmEVMMXMAv8tF9015C
sdSBk+E7DF76kwf0OnG3J54jn4qbRvfG2Wa93mE3LhzWTVg4lT23imt17LDjbYkr
7EsHjccJU3mAjPeW8BsMB4zge4CHIR+cAILWCl0x0/Xs2KM94bVZMvNuLdbrGHEg
04NFwklL0TCMdS0N9Ic56T+PysEpg+ESAJFte0aQMroD8zb25zq+ilE7H+jD/0RA
LCM2eTeeBFYf98GJIEnBkKifalOL55P0QTKeSq3HRBJLLBU5Tz907Gcs7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWpLe5ksaorF535khn87PXmbrFCMB8GA1UdIwQY
MBaAFA9DhufU78RywR/pz+89Mwl0sz9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmJmYjQtYjNmZS00NjVhLWIzNTct
NTJhYmI1M2I3NTEzLzEvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81NmJmYjQtYjNmZS00NjVhLWIzNTctNTJhYmI1M2I3NTEz
LzEvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2dAiVyeK
BnmKigWgMlupXdp1HdxmIxJZkrcsJPa+fvj/teusS102QRYFdFBb8s6kZZzMPAn0
Qzj9trp5pvLtKp8nE7pRmyIidfQIZPxCOe8/EolJzfYVCyobDYRkgr0n+/ybY3Lx
/cCvqH6eHJ0EAxzN1Of20h8ahvhD94S5k6iJgIUO/xjDiYuDUeLJy58ooN7ChEt1
JMWi4G/F8T1Mmv+LXaR2gEEiaVXrYpOOaUMTDqv2g3Q55D+ikR8ym4y3eMnhl3AX
i1bwb6yE7LQiYN5J2go8j5TcIdWjDssOYhSj5r0ndBzYfEJSsMuvjj3rrBjDbiCq
WaB2O4EsNRLOoA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:26 2026 by rpki-client